Proxmark3 community

vworp

Contributor

Registered: 2021-01-13

Posts: 4

Proxmark3 easy unable to write lf em 410x

I've picked up a proxmark3 easy from dangerousthings.com, followed the getting started instructions at https://forum.dangerousthings.com/t/get … -easy/9050
I've a selection  of 125khz tags that I can scan with lf search and a bunch of t5577 tags which can be identified with lf t55 det.
What I can't do is write to one of the t5577 tags with lf em 410x_write 12345678 1.
The only response I get is

[usb] pm3 --> lf em 410xwrite 32006B5D31 1
help This help
410x EM 4102 commands…
4x05 EM 4205 / 4305 / 4369 / 4469 commands…
4x50 EM 4350 / 4450 commands…
4x70 EM 4070 / 4170 commands…
[usb] pm3 -->

I've reinstalled proxspace and recompiled iceman, which now fails with

GEN lualibs/mfc_default_keys.lua
[=] LD proxmark3
[] MAKE bootrom/all
/bin/sh: arm-none-eabi-gcc: command not found
compiler version:
[=] GEN version.c
[-] CC version.c
make[1]: arm-none-eabi-gcc: No such file or directory
make[1]: *** […/common_arm/Makefile.common:124: obj/version.o] Error 127
make: *** [Makefile:131: bootrom/all] Error 2
pm3 ~/proxmark3$

So, I've abandoned compiling my own and grabbed the precompiled binaries from https://proxmarkbuilds.org/. Flashed bootrom & full image. Client starts up, I can hw tune, lf search, lf t55 det no problem, but when it comes to writing to a tag with lf em 410x_write xxxxxxxx 1, I’m back to the non helpful help listing.

Any guesses at what I can poke at next? I'm pretty unformilliar with proxmark at the moment

tcprst

Contributor

Registered: 2020-09-27

Posts: 10

Re: Proxmark3 easy unable to write lf em 410x

The reason that you keep getting the help text is because you're not using a real command.  The commands have changed to include subsections:

[usb] pm3 --> lf em
help             This help
410x             EM 4102 commands...
4x05             EM 4205 / 4305 / 4369 / 4469 commands...
4x50             EM 4350 / 4450 commands...
4x70             EM 4070 / 4170 commands...

So under the lf em 410x commands, there should be:

[usb] pm3 --> lf em 410x 
help             This help
demod            demodulate a EM410x tag from the GraphBuffer
reader           attempt to read and extract tag data
sim              simulate EM410x tag
brute            reader bruteforce attack by simulating EM410x tags
watch            watches for EM410x 125/134 kHz tags (option 'h' for 134)
spoof            watches for EM410x 125/134 kHz tags, and replays them. (option 'h' for 134)
clone            write EM410x UID to T55x7 or Q5/T5555 tag

For lf em 410x commands there is no "write". If you want to clone a em410x I might suggest the lf em 410x clone command.

vworp

Contributor

Registered: 2021-01-13

Posts: 4

Re: Proxmark3 easy unable to write lf em 410x

[usb] pm3 --> lf em 410x_clone help
help This help
410x EM 4102 commands…
4x05 EM 4205 / 4305 / 4369 / 4469 commands…
4x50 EM 4350 / 4450 commands…
4x70 EM 4070 / 4170 commands…
[usb] pm3 -->

Not quite, 410x_clone doesn't work either.

tcprst

Contributor

Registered: 2020-09-27

Posts: 10

Re: Proxmark3 easy unable to write lf em 410x

You're seeing the help text because the command you're using doesn't exist. Read what I wrote closer, try copy and pasting the below:

lf em 410x clone -h

vworp

Contributor

Registered: 2021-01-13

Posts: 4

Re: Proxmark3 easy unable to write lf em 410x

That's spot on.
Looks like every example I've read for the last few days was for an older version which still used 410x_write/410xwrite. This is what led me to trying 410x_clone.

Thanks for the pointer.

petro2024@yahoo.com

Contributor

Registered: 2021-02-28

Posts: 2

Re: Proxmark3 easy unable to write lf em 410x

I can confirm that lf em 410x clone --id ********** doesn't work on v4.9237 in my case either.